govanalytics
// 00 / Statement May 2026

[gov] is not a sector.
It is a standard.

Analytics vendors own data. That is their business model: they hold the silo, you have the login, and the arrangement lasts as long as the contract does. For a commercial web shop in 2014, that was a reasonable deal. For a municipality, a ministry or a hospital in 2026, it is a structural risk dressed up as convenience. govanalytics is web analytics at government standard, for government — and for anyone who chooses to hold themselves to the same standard. GDPR-compliant, BIO-aligned, and comply-or-explain by design.

GDPR-compliant BIO baseline NL hosting No cookies No EU export Data ownership

Organisations need to know whether their digital services are working.

The people they serve must not pay for that with their data.

Definition

What [gov] means.

[gov] is how an organisation chooses to handle digital measurement data. Not who it is, but how it acts. Five criteria:

  1. 01

    Collected in the Netherlands.

    No edge nodes elsewhere. No "EU-region" with footnotes.

  2. 02

    Measured without cookies.

    No consent banners. No dark patterns. No tracking pixels.

  3. 03

    Not transferred outside the EU.

    No Schrems II risk. No hidden sub-processors in the chain.

  4. 04

    Fully documented.

    DPIA, data processing agreement, ROPA, TIA: ready to use, updated quarterly.

  5. 05

    Exportable at any time without us.

    Your data ownership is architectural, not contractual.

Some organisations must meet this standard. Others choose to. govanalytics is built for both.

Four things that are currently not right.

01 / Wrong tool

Google Analytics was not built for [gov] work.

GA4 was built for advertising performance. Compliance was added on, not designed in. You notice this in the DPIA, the data processing agreement and the export options.

02 / Wrong basis

A cookie banner is not a legal basis.

A banner implements a consent requirement. It does not solve the underlying architectural problem. As long as you process personal data, the obligation remains.

03 / Wrong location

Data in the US is data outside your control.

Schrems II is not a formality. Transfers to the US without adequate safeguards are unlawful. "EU region" with an American parent company does not resolve this.

04 / Wrong ownership

Your data sits in their silo.

If you cancel tomorrow, your historical data is gone. That is not a side effect: it is the business model. Your analytics data belongs in your own environment.

govanalytics is web analytics that fits within your framework, not the other way around.

Hosted in the Netherlands. Aligned with the Dutch Baseline Information Security for Government (BIO). No cookies, no data transfers outside the EU, no hidden processors.

With documentation your procurement team, data protection officer and information security officer can read through without a red pen.

And with an architecture in which your data remains yours: stored in your own environment, exportable at any time, even without us.

Two reasons to choose [gov].

For every level of government — and for anyone who wants to hold themselves to the same standard, even when they are not required to.

01 / Because you must

Municipalities, ministries, executive agencies.

GDPR, BIO and comply-or-explain are not optional. govanalytics is built so you can meet all three without compromising on measurement or insight.

02 / Because it is right

Anyone who chooses the same standard.

Healthcare, education, finance: sectors where the [gov] standard is not a legal requirement, but is still the right choice. Same platform, same documentation, same architecture.

And for everyone who wants to hold themselves to the same standard

even when the law does not require it.